- Add kdump policy for Miroslav Grepl

- Turn off execstack boolean

booleans-targeted.conf

@@ -8,7 +8,7 @@ allow_execmod = false
 
 # Allow making the stack executable via mprotect.Also requires allow_execmem.
 # 
-allow_execstack = true
+allow_execstack = false
 
 # Allow ftpd to read cifs directories.
 # 

modules-minimum.conf

@@ -671,6 +671,20 @@ jabber = module
 # 
 java = module
 
+# Layer: system
+# Module: kdump
+#
+# kdump is kernel crash dumping mechanism
+# 
+kdump = module
+
+# Layer: apps
+# Module: kdumpgui
+#
+# system-config-kdump policy
+# 
+kdumpgui = module
+
 # Layer: services
 # Module: kerberos
 #

modules-mls.conf

@@ -650,6 +650,20 @@ jabber = module
 # 
 java = module
 
+# Layer: system
+# Module: kdump
+#
+# kdump is kernel crash dumping mechanism
+# 
+kdump = module
+
+# Layer: apps
+# Module: kdumpgui
+#
+# system-config-kdump policy
+# 
+kdumpgui = module
+
 # Layer: services
 # Module: kerberos
 #

modules-targeted.conf

@@ -671,6 +671,20 @@ jabber = module
 # 
 java = module
 
+# Layer: system
+# Module: kdump
+#
+# kdump is kernel crash dumping mechanism
+# 
+kdump = module
+
+# Layer: apps
+# Module: kdumpgui
+#
+# system-config-kdump policy
+# 
+kdumpgui = module
+
 # Layer: services
 # Module: kerberos
 #

selinux-policy.spec

@@ -20,7 +20,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.6.26
-Release: 8%{?dist}
+Release: 9%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -475,6 +475,10 @@ exit 0
 %endif
 
 %changelog
+* Mon Aug 10 2009 Dan Walsh <dwalsh@redhat.com> 3.6.26-9
+- Add kdump policy for Miroslav Grepl
+- Turn off execstack boolean
+
 * Fri Aug 7 2009 Bill Nottingham <notting@redhat.com> 3.6.26-8
 - Turn on execstack on a temporary basis (#512845)